Information Security Analyst

Protect digital assets, strengthen resilience, and support compliance across the bank. As an Information Security Analyst at TransPecos Banks SSB, you will help safeguard cloud and enterprise infrastructure, monitor security posture, and manage information security risk in alignment with industry standards and regulatory expectations. This is an onsite role in San Antonio, TX for candidates with 2+ years of experience.

What you’ll do

• Monitor and analyze security alerts from tools such as SIEM, IDS/IPS, DLP, and endpoint protection systems.
• Investigate and respond to cybersecurity incidents, including root cause analysis and remediation.
• Perform vulnerability assessments and penetration testing; lead recommendations for mitigation and ensure remediation plans are executed in a timely manner.
• Support Secure Development Lifecycle (SDLC) processes and help ensure secure development requirements are embedded and enforced throughout the SDLC.
• Manage processes for securing the bank’s cloud infrastructure, with a focus on Microsoft Azure and AWS.
• Track emerging and changing regulatory requirements, threats, and industry trends; advise leadership and generate reporting and metrics for management and regulatory bodies.
• Maintain and update IS policies, procedures, and standards aligned to frameworks such as NIST CSF 2.0 and regulatory expectations including FFIEC, GLBA, and others.
• Develop and maintain security documentation, playbooks, and training materials; support security awareness, education, and training for employees.
• Conduct internal and vendor IS risk assessments, including data privacy and other regulatory risk assessments; lead remediation efforts for identified control gaps.
• Assist with testing and management of the bank’s Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) to support operational resiliency and recovery.
• Support centralized Identity & Access Management (IAM) governance, including daily processing of access requests and provisioning.
• Monitor and report on IS metrics, including compliance performance dashboards and the status of risk remediation activities.
• Support audits, inspections, and reviews conducted by regulators and external parties.
• Carry out responsibilities consistent with organizational values and operating principles, in accordance with policy and applicable laws, with a commitment to continuous improvement and process excellence.
• Perform other duties as assigned.

What you bring

• Bachelor’s degree in Business Administration, Finance, Risk Management, Law, or a related field.
• 2–4 years of experience in an IS or cybersecurity role, preferably in banking or financial services.
• Certifications such as CRISC, CISA, CISM, CISSP, or equivalent are preferred.
• Familiarity with banking regulations, Interagency Information Security Standards, and cybersecurity frameworks such as NIST 2.0 CSF/RMF and PCI DSS, including regulatory expectations like FFIEC and FDIC Part 364 Appendix B (and familiarity with GDPR listed in the requirements).
• Strong technical aptitude with Microsoft Azure and AWS, including experience managing cloud security tools such as Sentinel, Defender, Purview, AWS Security Hub, and other native security tools.
• Strong analytical and problem-solving skills, plus knowledge of risk assessment methodologies and compliance frameworks.
• Ability to manage multiple priorities and collaborate in a team environment.
• Ability to interpret instructions provided in written, oral, diagram, or schedule form.
• Must be able to lift up to 20 pounds.

Core tools and frameworks

• Security and monitoring: SIEM, IDS/IPS, DLP, endpoint protection systems
• Cloud security: Microsoft Azure, AWS, Sentinel, Defender, Purview, AWS Security Hub
• Risk and compliance: NIST CSF 2.0, NIST 2.0 CSF/RMF, FFIEC, GLBA, PCI DSS, FDIC Part 364 Appendix B, GDPR
• Operations and access: SDLC, BCP, DRP, IAM

Compensation and reporting

• Wage type: Salaried
• Reports to: CISO

Key deliverables

• Satisfactory audit results and regulatory examinations.
• Timeliness and accuracy of risk assessments and reporting.
• Satisfactory and timely resolution of compliance incidents.